Lead Product Security Engineer (SaaS & AI)

Socket.dev; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

Assembled is seeking an experienced security-focused engineer to lead application security across SaaS and AI products. You will shape security practices, influence architecture, and build tooling to manage vulnerabilities from discovery through remediation.

The role offers high ownership and impact across engineering teams. You will work with product managers and engineers to implement secure design, automate controls, and coordinate third-party testing, while advancing SOC 2 and compliance

Qualifications

• 5+ years of hands-on application security experience including threat modeling, security code reviews, and vulnerability remediation.
• Strong software engineering fundamentals with production code experience in a complex codebase.
• Good risk judgment balancing security and shipping velocity.
• Experience using AI tools for security investigation, testing, or remediation and understanding their impact on the product threat model.

Responsibilities

• Lead product and application security across SaaS and AI products and the underlying infrastructure.
• Integrate and automate controls for secrets, access, and dependency security within engineering workflows and CI/CD pipelines.
• Establish and maintain code, dependency, and secrets scanning, plus dynamic application security testing; coordinate with external testers and triage findings.
• Develop secure design and coding training for engineers; define processes for routing security issues and ensuring fixes.
• Respond to security incidents, coordinate remediation, and drive post-incident improvements.
• Collaborate with Finance/Ops on SOC 2 and assurance work and translate customer needs into product decisions.

Skills

Security engineering

Programming fundamentals

Risk judgment

AI-assisted security

Go

Python

AWS

Kubernetes

Karpenter

Tools

Go

Python

AWS

Kubernetes

Karpenter

Job description

Assembled is seeking an experienced security-focused engineer to lead application security across SaaS and AI products. You will shape security practices, influence architecture, and build tooling to manage vulnerabilities from discovery through remediation.

The role offers high ownership and impact across engineering teams. You will work with product managers and engineers to implement secure design, automate controls, and coordinate third-party testing, while advancing SOC 2 and compliance